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1 "AUTOMATED REMOTE CONTROL SYSTEM FOR 

2 HOTEL IN-ROOM SAFES" 

3 CROSS-REFERENCE TO RELATED APPLICATIONS 

4 This application claims priority under 35 U.S.C. §1 .1 1 9 to U.S. Provisional 

5 Patent Application No. 60/264,944 filed January 29, 2001 , the entire contents of 

6 which are incorporated herein by reference as if set forth herein in full. 

O 7 FIELD OF THE INVENTION 

□ 8 This invention relates to the field of remote control systems for hotel in-room 

pb 9 safes. 

O 10 BACKGROUND OF THE INVENTION 

m 

m 1 1 Many hotel operators view having safes in their rooms for use by their guests 

O 

m 12 as a source of revenue. Several makes and models of in-room safes are available 

13 on the market. The majority of these safes are accessed electronically where a 

14 guest enters several digits on a keypad on the safe to open or close it. On some 

15 models, a swipe card reader is provided to allow the guest to use a credit card as a 

16 key for the safe. Accurate and economical tracking of the use of the in-room safes is 

17 needed to give the hotel operator the necessary information required to charge the 

1 8 guest a nominal fee for the use of the safe. 

19 One of the problems with a keypad controlled safe is that a guest will set their 

20 own passcode for the safe and, upon checking out of the guest room, close the safe 

21 and not inform anyone what the passcode is. The next guest using the room is not 

22 able to open the safe until the hotel operator opens the safe for the guest. This 
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1 would require sending a repairman to the guest room and manually resetting and 

2 opening the safe. If the hotel is large, the hotel operator could conceivably have a 

3 person working full-time simply to reset safes throughout the hotel. This would add 

4 significant cost to operating an in-room safe service for the guests. 

5 Another problem associated with current in-room safes is the lack of ability to 

6 accurately monitor and control the use of the safes. If a safe was simply left enabled 

7 at all times, there would be no way to track the use of the safe and the guest would 

p 8 be able to use the safe without paying for it. 

P 

CP 

p 9 Various attempts have been made to monitor or control the usage of in-room 

M= 10 safes. These attempts have utilized the existing cable TV system or an alternate 

Si 

s 1 1 hard-wired cable facility to connect each safe to a central control system. Use of the 

D 

M= 12 existing cable TV network is undesirable for a number of reasons. The hotel 

m 

m 13 operator may not own the cable TV network and use of this facility may require a 

O 

fUi 14 usage fee payable to the cable TV operator that increases the operating cost of the 

15 system. Combining the safe control signals with the programming signals from the 

16 cable TV operator over the cable TV network may be detrimental to both services as 

17 the television signals may interfere with the control signals to the safes while the 

18 additional equipment required to superimpose the safe controls signals onto the 

19 cable network may degrade the quality of the TV signal sent to the television set. 

20 Furthermore, any maintenance performed on the cable TV network by the cable TV 

21 operator may interfere or disrupt the control and monitoring of the in-room safes. 

22 Alternatively, hard-wired systems to control and monitor the in-room safes are also 

23 undesirable as the additional cable and installation costs make the system less 

24 economical. 
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1 In summary, these prior attempts are uneconomical, cumbersome or lack the 

2 necessary accuracy to provide the hotel operator the information required to 

3 accurately charge the guest for the use of the in-room safes. 

4 The present invention employs many novel features implemented in hardware 

5 and computer software to overcome these obstacles resulting in a very economical 

6 system to accurately control and monitor the status and usage of in-room safes. 

7 SUMMARY OF THE INVENTION 

8 The present invention is an apparatus and method for controlling in-room 

9 safes in hotel guest rooms where each safe comprises an electronically controllable 

10 lock mechanism. 

11 The present invention is a Remote Control System ("RCS") that comprises a 



12 number of components that work together to monitor and control the use of in-room 

13 safes by hotel guests. A control computer ("CC") is used to control and monitor the 

14 operation of the in-room safes. The CC interfaces with the hotel telephone system 

15 or private branch exchange ("PBX") and the hotel property management system 

16 ("PMS"). The PMS informs the CC when a guest has checked in or out of a guest 

17 room having an in-room safe while the CC informs the PMS when a guest is using 

1 8 their in-room safe so that the hotel may properly bill the guest for the use of the safe. 

19 A guest wishing to use, or discontinue to use, their in-room safe simply dials a 

20 predetermined telephone number in the hotel's telephone directory through the PBX 

21 to connect with the RCS. The RCS interprets the call as a command to enable or 

22 disable the guest's in-room safe. The PBX also provides the CC the room number of 
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1 the guest so that the CC will know which in-room safe to enable or de-enable. Upon 

2 receiving a command to enable or disable the safe, the CC also informs the PMS of 

3 this for billing purposes. Alternatively, the telephone command is forwarded from the 

4 PBX to the PMS which, in turns, informs the CC to enable or disable the safe. How 

5 this is performed depends on the capabilities and features of the PBX and PMS 

6 installed at the hotel. The present invention is adaptable to operate with the various 

7 types of PBX and PMS systems. 

q 8 A guest may also enable or disable their in-room safe when they check in at 

gj 9 the hotel or at some other time during their stay at the hotel by making the request at 

P 10 the front desk. This request is entered into the PMS and the PMS submits the 

n " 11 command to enable or disable the safe to the CC. The PMS is informed of the 

f& 12 guest's usage of the safe for billing purposes. 

p 13 Once the CC has received a request to enable or disable an in-room safe, the 

14 CC assembles an instruction that comprises the unique identification number of the 

15 safe and the command to enable or disable the safe. The instruction is forwarded to 

16 a transmit control module ("TCM") to be inserted into a data packet that includes a 

17 preamble comprising timing and synchronization signals required by the system to 

18 operate. The TCM conditions the data packet into a data stream that can modulate 

19 a radio carrier signal. The modulated radio signal is then amplified and transmitted 

20 by a wireless radio transmitter ("RT") to radiate throughout the hotel from an 

21 antenna. 

22 Each in-room safe is equipped with a safe control module ("SCM"). Each 

23 SCM comprises a wireless radio receiver ("RR") and a receiver-controller ("RC"). 

24 The RR receives the radio signal transmitted by the RT and demodulates the data 
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1 stream from the radio signal. The RC in each in-room safe is programmed with a 

2 unique identification number assigned to it by the CC thereby giving each in-room 

3 safe its own unique identifier. 

4 The RC will receive all instructions transmitted by the RT. When an RC 

5 receives a instruction that contains the unique identifier of its safe, the RC will then 

6 enable or disable the safe in accordance with the command contained in the 

7 instruction by enabling or disabling the lock mechanism of the safe. 

O 8 The RC in every in-room safe is battery powered so that each safe is 

P 

O 9 completely self-contained and freestanding. This allows the safe to be installed in a 

10 convenient location anywhere in the guest room and not be dependent on AC power. 

JL 1 1 To conserve energy and to extend the life of the battery in each safe, the system 

jr: 12 employs a novel technique to limit the power consumption of the SCM in each safe. 

13 All of the safes in the hotel are organized into logical groups such as, for 

14 example, all of the safes on a particular floor or group of floors in the hotel. The RCS 

15 organizes the instructions to be transmitted to the safes by assembling and 

16 transmitting a queue of instructions to the safes one group at a time. When the RCS 

17 has finished transmitting instructions to one group, it then assembles a queue of 

18 instructions for transmission to the next group. The RCS continues with this 

19 progression of transmitting instructions to successive groups of safes in a 

20 predetermined fashion until it has transmitted instructions to all of the safes. At 

21 precise times, the RCS repeats this cycle. 

22 The RC in each safe synchronizes its internal clock from the preamble 

23 contained in the data stream transmitted by the RCS. The preamble also informs 
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1 each RC of the next time to turn on its respective RR so the RC will know when to 

2 turn on its RR again to receive the set of instructions transmitted from the RCS 

3 during its next cycle. Once the RCS has completed transmitting instructions to a 

4 group of safes, the RC in each safe of the group turns off the power to its RR and 

5 waits until the next scheduled transmission time. In doing this, each RC causes its 

6 RR to be in an "off 1 state for most of the time thereby conserving the power drawn 

7 from its battery. 

p 8 Broadly stated, the present invention is a system and method for controlling a 

m 9 plurality of secure containers, each having a controllable lock mechanism, the 

O 

Eh 10 system comprising means for inputting a command to enable or disable a particular 

i* 

Si 1 1 container; a control computer for assembling an instruction operative to enable or 

O 12 disable the particular container in response to the command, the instruction 

13 comprising an identifier specific to the particular container; transmitting means, 

CP 

14 operatively connected to the control computer, for conditioning the instruction for 

m 

15 wireless transmission and wirelessly transmitting the conditioned instruction to the 

16 containers; and each container comprising container control means for receiving the 

17 transmitted instruction and for enabling or disabling the lock mechanism of that 

18 container if the instruction contains the identifier specific to that container. 

19 DESCRIPTION OF THE DRAWINGS 

20 FIG. 1 is an overall functional block diagram of the present invention; 

21 FIG. 2 is a functional block diagram of the safe control module of the present 

22 invention; 
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1 FIG. 3 is a flowchart diagram illustrating the steps of the Front Desk Safe 

2 Activation/ Deactivation Request process of the present invention; 

3 FIG. 4 is a flowchart diagram illustrating the steps of the Safe Activation 

4 process of the present invention; 

5 FIG. 5 is a flowchart diagram illustrating the steps of the Secure Forced 

6 Opening of a Safe process of the present invention; 

7 FIG. 6 is an electrical schematic of the Transmit Control Module circuit of the 

8 present invention; 

9 FIG. 7 is a functional block diagram of the Radio Transmitter of the present 

10 invention; 

11 FIG. 8 is an electrical schematic of the Receiver Controller circuit of the 

12 present invention; 

13 FIG. 9 is a flowchart diagram illustrating the steps of the Receiver Controller 

14 firmware of the present invention; and 

15 FIG. 10 is a flowchart diagram illustrating the steps of the Full Building Scan 

16 process of the present invention. 

17 DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 

18 FIG. 1 illustrates the functional elements of the present invention. Remote 

19 Control System ("RCS") 100 comprises control computer ("CC") 104, transmit control 

20 module ("TCM") 116, radio transmitter ("RT") 120 and antenna 124. CC 104 

21 communicates with the hotel telephone system or private branch exchange ("PBX") 
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1 108 over cable 106. CC 104 also communicates with the hotel property 

2 management system ("PMS") 1 1 2 over cable 1 1 0. 

3 CC 1 04 is a general purpose computer capable of operating the RCS control 

4 and database management software and comprises at least three serial data 

5 communications ports. Almost any type of general purpose computer running an 

6 operating system such as DOS, Windows or Linux may be used as the RCS 

7 software can be adapted to run on these operating systems. 

8 RCS 100 comprises software that permits RCS 100 to receive commands to 

9 enable or disable a particular safe, assemble the instruction to enable or disable the 

10 particular safe in response to the command and then transmit the instruction to the 

11 particular safe. 

12 Within hotel 128, there is a safe 132 installed in each guest room that can be 

13 enabled or disable by RCS 100. Each safe 132 may be any commercially available 

14 safe that comprises a keypad and an electronically controllable lock mechanism. 

15 Safe 132 may also comprise a swipe card reader that allows the use of credit cards 

16 as "keys" to open or close the safe. Contained in each safe 132 is a safe control 

17 module ("SCM") 134 that is controllable by RCS 100. Each safe 132 is assigned a 

18 unique identification number or identifier by RCS 100 when the safe is first installed 

19 and initialized to operate with RCS 1 00. 

20 Shown in FIG. 2 are the functional elements of SCM 134. SCM 134 

21 comprises radio receiver ("RR") 140, antenna 136 mounted on RR 140, receiver- 

22 controller ("RC") 142 and battery 162. Cable 142 connects RR 140 to RC 144. 

23 Battery 162 provides DC power for both RC 144 and RR 140. Cable 148 connects 
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1 RC 144 to keypad 148 which comprises display 151 . Cable 150 connects RC 144 to 

2 lock controller 1 52. Cable 158 connects lock controller 152 to lock mechanism 160. 

3 For a guest to enable or disable safe 132 in their room in hotel 128, there is 

4 more than one way that this may be accomplished. One method is performed by the 

5 guest making a request at the front desk of hotel 128 to enable or disable the safe in 

6 their room. 

7 FIG. 3 illustrates the functional steps of front desk activation process 400 

8 followed by RCS 100. The guest is queried at step 404 if they want to use the safe 

9 in their room. Their response is entered into PMS 112. Step 408 determines which 

10 steps are to be followed if the guest's response is "yes" or "no". If the guests wants 

11 the safe disabled, PMS 112 instructs RCS 100 at step 412 to assemble a disable 

12 command. If the guest wants the safe enabled, PMS 1 12 instructs RCS 100 at step 

13 416 to assemble an enable command. Both steps 412 and 416 lead to step 420 

14 where PMS 1 12 informs RCS 100 of the room number of the safe to be enabled or 

15 disabled so that a instruction for safe 132 can be assembled. At step 424, RCS 100 

16 puts the instruction into a queue of instructions that is transmitted as an RS-232 

17 serial data signal 101 to TCM 116 over cable 114 to be transmitted by RT 120. RCS 

18 100 follows steps 428, 432 and 436 to transmit the queue of instructions five times to 

19 the safes. 

20 The purpose of RCS 100 for repeating the transmission is to ensure that each 

21 safe 132 has received at least one transmission of the instructions. Radio frequency 

22 noise and radio signals from other sources may interfere with the transmission from 

23 RT 120, therefore, the transmission of the instructions is repeated to ensure that 

24 each safe 132 receives the transmission. The number of times the instructions are 
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10 

1 transmitted does not necessarily have to be five so long as the number chosen 

2 provides sufficient probability that each safe 132 will receive at least one 

3 transmission of the instructions. Once the instructions have been transmitted, RCS 

4 100 stores the activation status of safe 132 in the RCS database at step 440. RCS 

5 1 00 then informs RMS 1 1 2 of the status of safe 1 32 for the guest's billing records at 

6 step 444 whereupon the process ends at step 448. 

7 The other way a guest may enable or disable safe 132 is by using the 
telephone in their room. FIG. 4 illustrates the functional steps of safe activation 
process 500 followed by RCS 100 when a guests uses their in-room telephone to 
enable or disable safe 132. The entering of the command to RCS 100 using the 
telephone system in hotel 128 can be accomplished in a number of ways depending 



single predetermined telephone number programmed in PBX 108 from the telephone 
in the room housing safe 132 whereupon a voice announcement prompt 
programmed in PBX 108 instructs the guest to enter one digit to enable safe 132 or 
to enter another digit to disable safe 132. The digit entered by the guest is 
interpreted by CC 104 as an enable or disable command. 

Another method is to program one telephone number in PBX 108 that 
corresponds to enabling safe 132 and programming a second telephone number that 
corresponds to disabling safe 132. PBX 108 forwards this information to CC 104 
over cable 106. PBX 108 also forwards the room number of the guest entering the 
command to CC 104. CC 104 uses this information to derive the unique identifier of 
safe 132 and to assemble the instruction that comprises the unique identifier of safe 
132 and the command to enable or disable the safe. 
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1 Yet another method of enabling or disabling safe 132 using the telephone in 

2 the room housing safe 132 is to program one or two telephone numbers in PBX 108, 

3 as discussed above, for enabling or disabling safe 132 but PBX 108 forwards the 

4 command and room number of safe 132 to PMS 112 which, in turn, forwards this 

5 information to CC 104 over cable 110. Whichever method is implemented will 

6 depend entirely on the capabilities and features of PBX 108 and PMS 112 installed 

7 in hotel 1 28. RCS 1 00 is adaptable to accommodate any of these methods. 

O 8 Referring to the process illustrated in FIG. 4, RCS 100 queries whether a 

P 9 telephone command is present at step 504. If a telephone command is present, 

O 10 RCS 100 then queries at step 512 whether the command is to enable or disable safe 

"Ni li 132. If a disable command is entered, RCS 100 assembles a disable instruction at 

p 12 step 516. RCS 100 receives the room number of safe 132 from PBX 108 at step 520 

13 and then derives the unique identifier of safe 132 and assembles the instruction to 

■_ 14 disable safe 132 at step 524. If an enable command is entered, RCS 100 assembles 

15 an enable command at step 528. RCS 100 receives the room number of safe 132 

16 from PBX 108 at step 528 and then derives the unique identifier of safe 132 and 

17 assembles the instruction to enable safe 132 at step 536. 

18 At step 540, RCS 100 places the instruction into a queue of instructions that is 

19 transmitted as an RS-232 serial data signal 101 to TCM 116 for transmission to all 

20 safes 132 in hotel 128. RCS 100 then queries at step 508 whether it is time to 

21 transmit the instructions. If not, RCS 100 reverts back to step 504 to look for any 

22 other telephone commands to include in the queue of instructions to be transmitted. 

23 If it is time to transmit the instructions, RCS 100 follows steps 544, 548 and 552 until 

24 the queue of instructions have been transmitted to safes 132 five times. As 
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1 discussed above with activation process 400, the number of times the queue of 

2 instructions are transmitted does not necessarily need to be five so long as the 

3 instructions have been transmitted a sufficient number of times to ensure that there 

4 is a good probability that all of the safes will receive at least one complete 

5 transmission. Once the instructions have been transmitted, RCS 100 queries PMS 

6 112 at step 556 whether the guest entering the command has checked in. If "yes", 

7 RCS 100 stores the activation status of safe 132 in the RCS database at step 560. 

8 RCS 100 then informs PMS 1 12 the activation status of safe 132 at step 564. RCS 

9 100 reverts to step 504 to check if a telephone command is present. If, at step 556, 

10 the guest has not checked in, RCS 100 terminates safe activation process 500 at 

11 step 568. 

12 There are occasions where a guest will close and lock their safe before 

13 checking out of their room and not inform anyone what passcode they entered into 

14 the safe to open or close the safe. The next guest who attempts to open the safe will 

15 not be to because they do not have the passcode set by the previous guest. To 

16 remedy this situation, RCS 100 will follow the steps set out in safe opening process 

17 700 which is illustrated in FIG. 5. When a new guest checks into the hotel at step 

18 708, RCS 100 verifies that the previous guest for the room has checked out at step 

19 712. If the previous guest has not yet checked out, the process terminates at step 

20 728. If the previous guest has checked out, RCS 100 queries at step 716 if four 

21 hours has elapsed since the previous guest has checked out. This time period is 

22 adjustable to match the time period between the checkout time and check-in time of 

23 hotel 128. If four hours have not elapsed, the process terminates at step 728. If four 

24 hours have elapsed, RCS 100 verifies at step 720 that the new guest has checked 

25 in. If "no", the process terminates at step 728. If the new guest has checked in, 
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1 RCS 100 opens safe 132 in the guest's room at step 732 by submitting an instruction 

2 to open safe 132 to the queue of instructions that are transmitted to safes 132 at 

3 step 424 of activation process 400. 

4 The instructions to be transmitted by RCS 100 are first conditioned for 

5 transmission by TCM 116. Shown in FIG. 6 is the electrical schematic of circuit 

6 board 200 mounted in TCM 116. Data signal 101 from CC 104 enters buffer 220 on 

7 circuit board 200 through connector 224. Buffer 220 converts data signal 101 from 
O 8 RS-232 format to a non-return to zero ("NRZ") data format. In the present invention, 
m 9 buffer 220 is a dual RS-232 driver-receiver, model MAX232CPE, made by Maxim 
O 10 Semiconductor although any similar featured device will work. Microcontroller 212 
H 11 receives buffered data signal 101 and conditions it for modulating a radio frequency 
O 12 ("RF") carrier signal. In the present invention, microcontroller 212 is model 
*V 13 PIC16C73-04/P microcontroller made by Microchip Technologies Inc. Crystal 216 is 

14 a 3.6864 MHz crystal from CTS Reeves that provides the instruction cycle clock 

1 5 reference for microcontroller 212. 

16 Regulator 208 on circuit board 200 is a generic +5 VDC voltage regulator, 

17 available from multiple manufacturers, that regulates the unregulated +12 VDC 

18 power from RT 120 to produce the +5VDC power required by buffer 220 and 

19 microcontroller 212. 

20 After converting data signal 101 to NRZ format, microcontroller 212 takes data 

21 signal 101 and puts it into a data packet that includes a preamble comprising timing 

22 and synchronization data. Microcontroller 212 then creates a data frame which 

23 includes five copies of the data packet such that the data packet is transmitted to 
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1 safes 132 fives times as required by steps 428, 432 and 436 in activation process 

2 400 and steps 544, 548 and 552 in activation process 500. 

3 To condition the data frame for modulating a radio carrier signal, the data 

4 frame is Manchester encoded to produce data stream 190 that has no DC voltage 

5 component and has a 50% duty cycle. Other standards of data encoding may be 

6 used depending on the modulation/demodulation requirements of the radio 

7 transceiver used in RT 120 and the radio receiver used in SCM 134. Data stream 
pj 8 1 90 is then forwarded to RT 1 20 over cable 1 1 8. 

jjj; 9 The functional elements of RT 120 are shown in FIG. 7. In the experiments 

10 that were conducted in the development of the present invention, it was found that 

y 11 the radio frequency that provided good performance in radiating throughout the 

j;7 12 physical structure of a hotel and being received by safes in the hotel rooms was an 

13 ultra-high frequency ("UHF") in the range of 450 Megahertz to 470 Megahertz. It 

f~ 14 was also found that an output power of five to thirty watts was required at these 

15 frequencies in order to make the radio transmission link work between RT 120 and 

16 safes 132. 

17 In the present invention, RT 120 is a commercially available UHF transceiver 

18 that comprises a direct data input and a user-selectable output power. In the 

19 preferred embodiment, RT 120 is a Kenwood UHF transceiver, model TK-860. It is a 

20 "push to talk" transceiver that requires an input command to transmit and also 

21 comprises a receiver to detect any other radio signals in the radio channel used by 

22 the transceiver. The device produces a "channel busy" signal to provide a controller 

23 information on whether the radio channel is available for transmission. 
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1 In the present invention, RT 120 receives data stream 190 from TCM 116 

2 over cable 118 and through connector 164 where it is modulated onto an 

3 intermediate frequency ("IF") carrier 170 at modulator 168. IF carrier 170 is 

4 modulated onto a radio frequency ("RF") carrier and is amplified at transmitter 172 to 

5 produce radio signal 130. Radio signal 130 is connected to antenna 124 through 

6 coax cable 122 where it radiates throughout hotel 128. Antenna 124 may be an 

7 omni-directional or a unidirectional UHF antenna depending on the location of 

8 antenna 124 within hotel 128 and area of coverage that antenna 124 must provide to 
O 9 reach all safes 132 in hotel 128. A Sinclair Labs model 30B quarter-wave omni- 
on; 10 directional vertical antenna has been used successfully with the present invention. 

a 

|* 11 In order for RT 120 to transmit radio signal 130, transmit enable lead 180 

H 

% 12 must be enabled by TCM 116. Before radio signal 130 is transmitted, TCM 116 

O 1 

M= 13 requires feedback from receiver 176 whether the radio channel is clear. Receiver 

W 

m 14 176 detects any other radio signals in the radio channel and controls channel busy 

p 

PIP 15 lead 178. If other UHF radio signals are present, receiver 176 enables channel busy 

16 lead 178 which is fed back to TCM 116. This signals microcontroller 212 that radio 

17 transmission cannot take place until the radio channel is clear. Microcontroller 212 

18 also informs CC 104 that the attempt to transmit data stream 190 was aborted. 

19 When receiver 176 detects no other radio signals, channel busy lead 178 is disabled 

20 and microcontroller 212 is informed that RT 120 can transmit radio signal 130. 

21 Microcontroller 212 will enable transmit enable lead 180 and will transmit data 

22 stream 190 to RT 120 to be transmitted. After data stream 190 has been 

23 transmitted, transmit enable lead 180 is disabled and CC 104 is informed that data 

24 stream 190 has been transmitted. The data rate of data stream 190 that is currently 

25 being transmitted by the present invention is 600 Baud. This is limited by the data 
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1 transmission capacity of the transceiver device used in RT 120. If the cost of the 

2 electronic components were not a factor in producing the present invention, higher 

3 data rates could be achieved using other higher performance radio transceiver 

4 components of a higher cost. 



5 Radio signal 130 transmitted by RT 120 is received by SCM 134 in each safe 

6 132 located in hotel 128. Antenna 136 on RR 140 detects radio signal 130. RR 140 

7 demodulates data stream 190 from radio signal 130. In the present invention, RR 
Q= 8 140 is a commercially available pager receiver circuit that has a data output. 
f 9 Possible examples of acceptable devices for this application are a dedicated remote 

a 

Q 10 control type receiver as manufactured by Ming Microsystems or a personal paging 

M; 

li receiver board such as used in Motorola Keynote pagers. In the preferred 

p 12 embodiment of the present invention, a Motorola Bravo pager receiver board, model 

13 AARE4001A-0, is used as RR 140. This device provides good performance at a low 

O 14 cost. 

m 

15 After being demodulated by RR 140, data stream 190 is transmitted to RC 

16 144 over cable 142. FIG. 8 illustrates the electrical schematic of circuit board 300 of 

17 RC 144. There are two microcontrollers on circuit board 300. Microcontroller 308 is 

18 a model PIC12C508-04/SO microcontroller manufactured by Microchip Technology 

19 Inc. and generates internal timing clock signal 310 that has a frequency of one hertz 

20 and generates a leading edge clock pulse every second. Crystal 316 is a 32.768 

21 kilohertz watch-type crystal that provides the timing reference for microcontroller 308 

22 to produce clock signal 310. Microcontroller 312 is a model PIC12CE518-04/SO 

23 microcontroller manufactured by Microchip Technology Inc. and controls all of the 
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1 functions RC 144. Crystal 320 is 3.6864 megahertz crystal and provides the 

2 instruction cycle clock for microcontroller 31 2. 

3 The flowchart of the firmware programmed into microcontroller 312 is shown 

4 in Fig. 9. The receiver firmware 800 initially starts at step 804 when SCM 1 34 is first 

5 powered up. At step 808, RC 144 turns on the power to RR 140. At step 812, RC 

6 144 looks for the preamble and any instructions in data stream 190 transmitted by 

7 RCS 100. At step 816, RC 144 looks for the preamble in the data packets 

8 contained in data stream 190. If the preamble is not present, RC 144 determines at 

9 step 852 if the receiver active time for RR 140 has expired. If it has not, RC 144 

10 reverts back to step 812 to look for the preamble again. If the receiver active time 

11 has expired, RC 144 proceeds to step 856 to power off RR 140. RC 144 then waits 

12 at step 860 before reverting back to step 808 to start the process again. 

13 If RC 144 finds the preamble in data packets in data stream 190, RC 144 then 

14 looks for data present in the instructions at step 820. RC 144 examines the data at 

15 step 824 to determine if the data is valid. If the data is not valid, then the process 

16 reverts back to step 852. If the data is valid, RC 144 determines at step 828 if the 

17 instruction contains its unique identifier. If not, the process reverts back to step 852. 

18 If the instruction does contain the unique identifier stored in the non-volatile memory 

19 of microcontroller 312, then RC 144 determines if the command is an enable 

20 command at step 832. If it is not an enable command, RC 144 disables the use of 

21 safe 132 at step 848 and then proceeds to step 856 to turn off RR 140. If the 

22 command is an enable command, RC 144 checks if switch 340 is turned on at step 

23 836. If switch 340 is activated, RC 144 receives a new unique identifier assigned to 

24 it by RCS 100. If switch 840 is not activated, then RC 144 enables safe 132 at step 
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1 844. Following steps 840 and 844, RC 144 proceeds to step 856 to turn off RR 140, 

2 at which point the RC 144 returns to step 808 and to repeat the process. 

3 Referring back to FIG. 8, microcontroller 312 primarily operates in a shutdown 

4 mode to minimize power consumed from battery 162. When microcontroller 312 

5 receives a leading edge clock pulse from clock signal 310, microcontroller 312 

6 reverts to normal operation and turns on power to RR 140 by turning on transistor 

7 344. Regulator 348 is a standard LM 317 regulator and regulates the voltage 

8 supplied to it by transistor 344. Resistors 345 and 347 adjust the output voltage from 

9 regulator 348 to the +1 .5 VDC required by RR 140 which is fed to it over cable 142. 

10 Microcontroller 312 waits for a sufficient amount of time to allow RR 140 to stabilize 

11 and then begins to look for data stream 190 from RR 140. Microcontroller 312 

12 analyzes data stream 190 for the timing and synchronization data inserted into the 

13 preamble of the data packets contained in data stream 190. If the preamble is not 

14 present, microcontroller 312 rejects the received data stream 190 as RF noise or as 

15 an interfering transmission from another source and shuts down until it receives the 

16 next timing pulse on clock signal 310. If the preamble is present in data stream 1 90, 

17 microcontroller 312 converts data stream 190 into data signal 101 and then extracts 

18 the unique identifiers and commands contained in data signal 101. In each SCM 

19 134, the unique identifier of each safe 132 is programmed into the non-volatile 

20 memory of microcontroller 312. No two safes will have the same unique identifier. 

21 If the unique identifier extracted from data signal 101 by microcontroller 312 

22 does match the unique identifier of safe 132, microcontroller 312 then determines if 

23 the command is to enable or disable safe 132. If the command is to enable safe 

24 1 32, microcontroller 312 checks the status of magnetic switch 340 to determine if 
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1 safe 132 is being initialized. When each safe 132 is first installed, it contains a 

2 default identifier and must be initialized by RCS 1 00 to receive a unique identifier to 

3 operate in the system. When safe 132 is being initialized, it is configured into a learn 

4 mode by activating switch 340. To activate switch 340, a magnet is placed on the 

5 safe control bezel behind which switch 340 is located. If microcontroller 312 detects 

6 that switch 340 is enabled, microcontroller 312 enters into learn mode and waits to 

7 receive the unique identifier assigned and transmitted to it by RCS 100. RCS 100 

8 then transmits the default identifier to safe 132 so that safe 132 will recognize 

9 initialization commands and receive its new unique identifier from RCS 100. 

10 If switch 340 is not enabled, microcontroller 312 recognizes that it is not in 

11 learn mode and will enable safe 132. If the received command was to disable safe 

12 1 32, microcontroller 31 2 will simply disable safe 1 32. Microcontroller 31 2 enables or 

13 disables safe 132 by enabling or disabling lock controller ("LC") 152. LC 152 is 

14 controlled by intercepting the control signals that normally pass between keypad 148 

15 and LC 1 52. The control signals from keypad 148 are routed from cable 146 through 

16 connector 328 on RC 144 to switch 324. From switch 324, the control signals are 

17 routed through connector 328 to LC 152 over cable 150. When microcontroller 312 

18 recognizes the unique identifier in data signal 101, microcontroller 312 activates or 

19 deactivates switch 324 to enable or disable the control signals between keypad 148 

20 and LC 152. If safe 132 comprises a swipe card reader ("SCR") 156, microcontroller 

21 312 will send an activate or deactivate signal to switch 336 which is connected to 

22 SCR 156 via connector 332 and cable 154. If the command received by 

23 microcontroller is to disable safe 132, switch 336 will shunt or short out the magnetic 

24 read head on SCR 156 disabling its ability to read the magnetic stripe on the guest's 
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1 swipe card. If the command is to enable safe 1 32, microcontroller 31 2 signals switch 

2 336 to remove the shunt. 

3 If the unique identifier extracted from data signal 101 does not match the 

4 unique identifier of safe 132, microcontroller 312 interprets the commands contained 

5 in data signal 101 as being commands for different safes and are ignored. 

6 Microcontroller 312 then powers off RR 140 and returns to shutdown mode until the 

7 next leading edge timing pulse from clock signal 310. 

8 To conserve battery power consumption in each safe 132, the present 

9 invention employs a novel technique in the manner commands are transmitted by 

10 RCS 100 to safes 132. In large hotels, the hotel rooms are typically distributed 

1 1 throughout a number of different floors. The present invention is configured, upon its 

12 initial installation in a hotel, to organize the safes in the hotel into logical groups. 

13 Typically, each logical group will comprise all of the safes on a given floor of the 

14 hotel. Accordingly, RCS 100 is programmed to transmit instructions to the safes one 

15 logical group at a time. 

16 At precise time intervals, RCS 100 will begin a "scan" of hotel 128 by 

17 transmitting instructions to all safes 132 beginning at either the top floor or the 

18 bottom floor of hotel 128. The purpose of the scan is to transmit instructions to the 

19 safes in a structured and progressive fashion. RCS 100 will begin with a scan, for 

20 example, starting on the bottom floor and then progressively move up the hotel one 

21 floor at a time. Once RCS 100 scan has reached the top floor, the scan has been 

22 completed until the next scheduled time a scan is to be performed. At that time, 

23 RCS 100 reverses the direction of the scan by transmitting instruction to safes 132 
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1 starting at the top floor and progressively moving down the hotel one floor at a time 

2 until the scan reaches the bottom floor of the hotel. 

3 FIG. 10 illustrates the functional steps of the building scan software module 

4 600. RCS 100 initiates a building scan at step 604 at a designated time. At step 

5 608, RCS 1 00 queries the direction of the scan. If the direction of the current scan is 

6 up, step 628 will set a flag that the direction of the next scan will be down. At step 

7 632, RCS 1 00 sends coded transmissions to the bottom floor. At step 636, RCS 1 00 

8 increments up one floor to begin transmission of instructions to the safes on this 

9 floor. At step 640, if the top floor has not yet been reached, RCS 100 then repeats 

10 steps 632 and 636 until all floors have been transmitted to. After reaching the top 

1 1 floor, the scan is terminated at step 644. When the scan is performed at the next 

12 designated time, the direction of the scan will be reversed. The scan then goes 

13 through steps 612, 616, 620 and 624 to progressively send instructions to groups of 

14 safes starting at the top floor and then working down the hotel one floor at a time 

15 until the scan has reached the bottom floor. After reaching the bottom floor, the scan 

16 is terminated at step 644 until the next designated scan time. 

17 The present invention as disclosed uses UHF radio components due to their 

18 low cost and good performance. It is contemplated that other wireless transmission 

19 technologies could be adapted to provide similar performance as the UHF radio 

20 technology used in the disclosed invention. It is anticipated that magnetic or 

21 induction field technology could be used as a wireless communications link between 

22 RCS 100 and safes 132. In this adaptation of the present invention, the receiver in 

23 the safe could be replaced with a coil, a filtered amplifier, a few passive components 

24 and a small power supply. The frequency of the inductive field would in the range of 
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1 10 Hertz to 1 Megahertz and would be modulated with on-off keying or other means 

2 of modulation to carry data. The desired data rate of communication would 

3 determine the frequency of the carrier field. The transmitter would consist of a large 

4 coil designed to emit an oscillating magnetic field throughout the hotel. It is also 

5 contemplated that other wireless transmission means such as optical or acoustic 

6 carrier signals could be used to control safes in hotels as well. 

7 While the present invention was intended to control in-room safes in a hotel, it 
jf 8 is also contemplated that the technology could be adapted to other applications. The 
2 9 system could be configured to control lockers in public locker rooms at swimming 
% 10 pools or other athletic or public facilities. The system could also be adapted to 
H 11 control a plurality of secured storage rooms in a public self-storage facility. The 
k 12 technology of the disclosed invention may be adapted for any application where 
pi; 13 remote control of a number of secured containers, each having a controllable lock 
jfi 14 mechanism, is required. 
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